gcp-iam-catalog Roles Permissions
🔑

dns.managedZones.setIamPolicy

Granted by 2 roles
🔍
Role Name
Role Type
roles/iam.securityAdmin
Predefined
roles/owner
Basic
🔍